Description

During this module, participants will learn cybersecurity in the environment of Industrial Control Systems. Participants will learn how a control system can be attacked from the internet and perform hands-on practice sessions on network discovery techniques.

Technical content

• IT vs. OT
  • Types of ICS Systems
  o DCS vs. SCADA
• SCADA components
  o Human Machine Interface (HMI)
  o Supervisory System
  o Remote Terminal Units (RTUs)
  o Programmable Logic Controller (PLCs)
• ICS security overview
  o Basic Security Concepts
  o Physical Security
  o Digital Security
  o ICS Lifecycle Challenges
• ICS Network Architectures
• Known ICS Protocols
  o Modbus
  o DNP3
  o How to Approach Protocols Research
  o ICS Protocol Fuzzing

Description

During this module, participants will be trained on network discovery using Metasploit and practicing in hands-on Red Team exercises. In this module, we will cover the ways to attack the SCADA environment. Participants will develop a broader understanding of where these specific attack vectors exist, as well as the tools that are used to discover vulnerabilities.

Technical content

• Security in ICS
  o Encryption
  o Firewalls with ICS
  o DMZ Approach
  o Access Control
  o Intrusion Detection (IDS)
• Web Application Attacks
  o Brute Force
  o Extracting Data
  o SQL Injection
• ICS Exploitation using Metasploit
  o Metasploit modules for SCADA
  o Exploit with Metasploit
  o Control with Metasploit
• ICS Attack Tools
  o Modscan
  o SMOD
• Network attacks
  o Flooding
  o MiTM
  o Denial of Service (DoS)
  o Jamming
  o Wi-Fi Security Issues
• Attacks on HMI
  o ICS Security Framework
  o Brute Force

Description

In this module, we will present to participants ways to plan, design, and implement an effective program to protect SCADA systems using Penetration Testing methods. Participants will gain knowledge of conducting these tests on the “Test-environment” using advanced techniques.

Technical content

• Preparing for Penetration Testing
  o Setting up a Virtual Machine for Penetration Testing
  o Creating your VM Network
  o Architectures Overview
• Testing your Network
  o Gathering Information Passively
  o Port Scanning
  o System Fingerprinting
  o Passwords Complexity Testing
  o Administrator Privileges Escalation Testing
• Testing for Vulnerabilities on Master Servers
  o Checking for Vulnerabilities
  o Analyzing Services and Ports
  o Analyzing Communications
• Testing for Vulnerabilities on User Interfaces
  o Web Applications
  Identifying Attacks
  Exploiting Vulnerabilities
  PHP Vulnerabilities
  o Terminal Interfaces
  o Traditional Applications
• Testing for Vulnerabilities on Network Protocols
  o Breaking Open Network Protocols
  o Protocol Analysis
  o Using Network-Based Signatures
  o Radio Frequency Capture
  o Sniffing Network Traffic
  o Extracting Network Traffic
• Testing for Vulnerabilities in Embedded devices
  o Firmware Fuzzing
  o Analyzing the Firmware
  o Exploiting Firmware Vulnerabilities
• Security Assessment
• Writing a Penetration Testing Report